Claude sets an environment variable to prevent nested invocation, but I've found it can be unset. No idea if they consider that a violation of the secret laws though.